Sync uninstallation manifest from longhorn/longhorn-manager repo

Longhorn-4239

Signed-off-by: Phan Le <phan.le@suse.com>

uninstall/uninstall.yaml

@@ -1,38 +1,38 @@
-apiVersion: policy/v1beta1
+#apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
+#kind: PodSecurityPolicy
-metadata:
+#metadata:
-  name: longhorn-uninstall-psp
+#  name: longhorn-uninstall-psp
-spec:
+#spec:
-  privileged: true
+#  privileged: true
-  allowPrivilegeEscalation: true
+#  allowPrivilegeEscalation: true
-  requiredDropCapabilities:
+#  requiredDropCapabilities:
-  - NET_RAW
+#  - NET_RAW
-  allowedCapabilities:
+#  allowedCapabilities:
-  - SYS_ADMIN
+#  - SYS_ADMIN
-  hostNetwork: false
+#  hostNetwork: false
-  hostIPC: false
+#  hostIPC: false
-  hostPID: true
+#  hostPID: true
-  runAsUser:
+#  runAsUser:
-    rule: RunAsAny
+#    rule: RunAsAny
-  seLinux:
+#  seLinux:
-    rule: RunAsAny
+#    rule: RunAsAny
-  fsGroup:
+#  fsGroup:
-    rule: RunAsAny
+#    rule: RunAsAny
-  supplementalGroups:
+#  supplementalGroups:
-    rule: RunAsAny
+#    rule: RunAsAny
-  volumes:
+#  volumes:
-  - configMap
+#  - configMap
-  - downwardAPI
+#  - downwardAPI
-  - emptyDir
+#  - emptyDir
-  - secret
+#  - secret
-  - projected
+#  - projected
-  - hostPath
+#  - hostPath
----
+#---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: longhorn-uninstall-service-account
-  namespace: default
+  namespace: longhorn-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -71,10 +71,10 @@ rules:
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
     verbs: ["*"]
-  - apiGroups: ["policy"]
+  #  - apiGroups: ["policy"]
-    resources: ["podsecuritypolicies"]
+  #    resources: ["podsecuritypolicies"]
-    verbs: ["use"]
+  #    verbs: ["use"]
-    resourceNames: ["longhorn-uninstall-psp"]
+  #    resourceNames: ["longhorn-uninstall-psp"]
   - apiGroups: ["admissionregistration.k8s.io"]
     resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
     verbs: ["get", "delete"]
@@ -90,13 +90,13 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: longhorn-uninstall-service-account
-    namespace: default
+    namespace: longhorn-system
 ---
 apiVersion: batch/v1
 kind: Job
 metadata:
   name: longhorn-uninstall
-  namespace: default
+  namespace: longhorn-system
 spec:
   activeDeadlineSeconds: 900
   backoffLimit: 1
@@ -105,18 +105,18 @@ spec:
       name: longhorn-uninstall
     spec:
       containers:
-      - name: longhorn-uninstall
+        - name: longhorn-uninstall
-        image: longhornio/longhorn-manager:master-head
+          image: longhornio/longhorn-manager:master-head
-        imagePullPolicy: IfNotPresent
+          imagePullPolicy: IfNotPresent
-        securityContext:
+          securityContext:
-          privileged: true
+            privileged: true
-        command:
+          command:
-        - longhorn-manager
+            - longhorn-manager
-        - uninstall
+            - uninstall
-        - --force
+            - --force
-        env:
+          env:
-        - name: LONGHORN_NAMESPACE
+            - name: LONGHORN_NAMESPACE
-          value: longhorn-system
+              value: longhorn-system
       restartPolicy: OnFailure
       serviceAccountName: longhorn-uninstall-service-account
 #      imagePullSecrets: